Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File:                     ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier:          cddNE6Chf1nZGt0cOcCcSrNF4VTM1nV8tD0C7wKaK+M=
Subject key identifier:   0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       02B4
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:35:32 +0000
ROA not before:           Fri 01 Mar 2024 03:35:32 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.158.0/24 maxlen: 24
                          103.146.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Mar  1 03:35:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e14d04-b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:03:83:02:63:b0:27:37:0a:cf:f4:94:3f:
                    79:65:0c:17:aa:81:1d:95:b8:af:05:b7:5a:90:62:
                    7b:f8:70:3a:cd:ac:ba:b5:fc:58:f4:d3:a3:33:a0:
                    68:d2:3b:51:3d:53:b7:fc:8e:55:58:ec:e1:bb:0f:
                    81:97:4c:c5:40:c1:63:0e:21:7c:41:b1:25:08:a9:
                    ea:0d:8d:d8:ca:89:b6:7f:c0:8c:ec:87:d1:e6:a2:
                    17:00:63:97:ce:74:75:41:e4:71:8d:2d:7c:f1:41:
                    b1:b9:d2:86:4d:e2:24:ae:2f:ef:d4:7d:7b:9f:0b:
                    b6:26:02:44:83:33:ea:8a:ba:98:a2:31:5d:a9:1c:
                    ff:fe:6e:76:da:a9:c3:dc:90:01:22:90:be:8b:2c:
                    7b:8a:e6:74:bb:77:3a:db:bb:c0:6c:99:f7:bd:7a:
                    41:66:af:08:1d:d3:14:4c:d7:22:95:39:56:7e:f2:
                    9b:a2:a4:16:3d:bd:02:b7:8a:48:3e:65:07:2c:95:
                    0f:fc:bf:a2:13:1e:5b:78:92:4b:03:69:61:20:19:
                    e0:85:79:b4:1f:af:4a:81:8f:a9:99:37:f3:2f:0f:
                    63:4a:18:49:e3:d9:f3:d7:f8:87:ed:34:66:6d:2a:
                    99:4c:38:95:e3:fc:0e:4b:be:c6:c7:7e:92:af:c4:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:d3:7b:13:bc:97:9a:7a:b4:5f:37:81:1c:40:ac:33:df:
         8f:80:44:a4:df:cf:5b:73:41:5a:a3:a4:b7:31:e3:17:7d:50:
         94:a3:cb:8b:23:da:a0:c9:a2:d9:69:91:07:44:c2:c1:ce:c9:
         ba:6e:63:bd:f0:ba:53:79:d2:94:bb:eb:c8:22:7c:4f:3a:46:
         77:bd:ae:94:d5:ec:e1:89:dd:ee:f6:c2:6b:bd:f7:41:00:8c:
         b7:4e:73:be:05:bd:26:18:a0:61:d2:7e:83:3f:cd:51:61:4c:
         0c:c9:69:31:93:6a:8c:e5:9f:ff:e9:6a:bb:f5:e6:a5:9a:ca:
         fb:e1:61:e4:31:cf:d0:ff:b0:ca:4a:24:4d:84:b2:df:27:a7:
         da:0b:ca:cd:7e:c6:f8:d6:90:4a:59:a7:2a:36:ea:f4:f9:11:
         ee:21:2e:19:a6:6b:7d:c5:1d:50:e1:74:12:d2:53:9b:74:36:
         e7:ef:20:2d:e3:a2:59:93:01:2c:7c:94:a1:d9:e1:a5:40:3c:
         a5:4e:95:08:7d:85:ff:f9:82:77:42:df:e5:ec:6c:fc:cb:cb:
         2c:6f:03:d4:d3:95:de:77:65:12:b8:95:c4:a1:47:63:b4:69:
         26:a2:30:27:c9:dd:c8:a9:03:0e:35:18:52:36:e6:c6:39:59:
         0f:e8:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:56 2024 by rpki-client on console-ams.rpki-client.org